FlatPress 路径遍历漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a path traversal vulnerability , the vulnerability stems from the component File Delete Handler in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the function...

CVE-2022-4748: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

PT-2022-28074 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue was found in FlatPress, affecting the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the Media Manager Plugin. The manipulatio...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a cross-site scripting vulnerability, the vulnerability stems from a problem with the function main in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the component...

PT-2022-28064 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A critical issue was found in FlatPress, affecting the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler...

CVE-2022-4755: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

FlatPress has an unspecified vulnerability

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

FlatPress 1.2.1 XSS Vulnerability (CVE-2022-40047)

FlatPress is prone to a cross-site scripting XSS vulnerability via the page parameter at SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FlatPress < 1.3 Multiple Vulnerabilities

FlatPress is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-4605

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

Remote file inclusion

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606

CVE-2022-4606 is a PHP Remote File Inclusion vulnerability impacting FlatPress (flatpress/flatpress) prior to version 1.3. Multiple connected sources corroborate the issue and describe an RFI leading to remote code execution via the uploader/media manager workflow (PoC demonstrated in Huntr entry...

FlatPress 安全漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

CVE-2022-4605: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4605

CVE-2022-4605 is a Cross-site Scripting (XSS) vulnerability stored in the FlatPress project, affecting versions prior to 1.3. Several CVE sources confirm the issue with a stored XSS in flatpressblog/flatpress. A PoC exists per Huntr (Stored XSS via SVG File), illustrating exploitation through SVG...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4605 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606: Improper Control of Filename for Include/Require Statement in PHP Program

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...